University of Copenhagen (Københavns Universitet) Data Breach
On October 20, 2026, the University of Copenhagen (Københavns Universitet, ku.dk) detected a cyberattack targeting one of its IT test environments and publicly disclosed the breach on October 23, 2026.
Exposed Data Types
5- Names
- Government issued IDs
- Phone numbers
- Email addresses
- PIN codes
About This Breach
The compromised database held active and historical records dating back to 2008 for approximately 525,000 current and former students, employees, and alumni.
Exposed data included full names, Danish civil registration numbers (CPR), work and private phone numbers, and personal email addresses. While the university confirmed that no account passwords were stored in the affected database, a subsequent update revealed that physical ID card PIN codes for roughly 20,000 staff and students were also compromised, prompting temporary campus access restrictions and PIN reissuance.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
